Hardware-backed SSH key management, with first-class git identity and commit signing. sshenc generates SSH keys inside the Secure Enclave (macOS), TPM 2.0 (Windows/Linux), or a software fallback and serves them via a standard SSH agent. Private key material never leaves the hardware — it can't be exported, copied, or stolen from disk. Bundled with sshenc is gitenc, a git wrapper that makes per-rep